Vulnerabilities

TI-2024-06804 CVE-2024-7343 · GHSA-x6qr-qghp-2wfr

Baidu UEditor cross site scripting

MEDIUM 57

A vulnerability was found in Baidu UEditor 1.4.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00453 Published 2024-08-01 No fix listed CWE-79

TI-2024-06803 CVE-2024-7342 · GHSA-rr2m-vxfp-vgm4

MEDIUM 57

A vulnerability was found in Baidu UEditor 1.4.3.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00453 Published 2024-08-01 No fix listed CWE-434

TI-2021-15292 CVE-2021-37271 · GHSA-wj6j-v4x2-wj65

LOW 25

Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00562 Published 2021-09-28 No fix listed CWE-79

TI-2017-10807 CVE-2017-14744 · GHSA-8949-pxh3-9x3f

LOW 28

UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00635 Published 2017-09-26 No fix listed CWE-79